Privacy Policy

Last updated: 9 October 2026

Data Controller: Samuel Moreno Conejero (ID 46067689T), Carrer del Consell de Cent 140, Àtic 4, Barcelona, Spain. Contact: info@fakturia.es. WHAT WE PROCESS AND WHY • Waiting list: your email and language preference, to tell you about the launch and send you tax news. Legal basis: your consent (GDPR Art. 6.1.a), which you can withdraw at any time. • Account and profile: email, login credentials and the tax details you enter (name or company name, tax ID, address). Legal basis: performance of the contract (Art. 6.1.b). • Invoicing: the invoices, clients, expenses and receipt images you upload. Legal basis: performance of the contract and, for the billing records, a legal obligation (Art. 6.1.c; Spanish Royal Decree 1007/2023, VeriFactu). • Subscription payment: your email and the transaction details. Fakturia does not store your card number: the payment gateway handles it. • Service usage: technical access and delivery logs, for security, support and proof of compliance. Legal basis: legitimate interest (Art. 6.1.f). • Mobile app: if you turn on notifications, your device’s notification identifier, language and app version, to notify you about payments and quotes (Legal basis: your consent, which you withdraw by turning them off). Receipt photos you take with the camera or pick from your library are only uploaded when you save them as a receipt or ask us to read them. Face ID or fingerprint unlock happens on your device: we never receive biometric data. • In-app purchases: if you subscribe through the App Store, Apple charges and handles the payment; we only receive (through Cifrago) confirmation of the purchase to activate your plan, never your payment details. WHO RECEIVES YOUR DATA • Google Cloud and Cloudflare — database hosting and file storage. • Cifrago — our payment gateway; it receives your email and the amount in order to charge the subscription. • Apple — charges subscriptions bought on the App Store and delivers push notifications to your iPhone. • Sinergia central AI gateway — processes the text or image you send to the tax assistant or to the expense OCR and decides which AI engine resolves it. Nothing is sent there if you do not use those features. • Transactional email provider (SMTP) — to deliver the service emails to you. • Spanish Tax Agency (AEAT) — receives the billing record of every invoice you issue under VeriFactu. This is a legal obligation, not an optional disclosure. We do not sell your data and we do not disclose it for advertising purposes. RETENTION Waiting-list data is deleted when you withdraw your consent. Tax and accounting data is kept for the periods required by Spanish commercial and tax law, even if you close your account. You can ask us for the detail per data type by writing to us. You can delete your account from the app (More → Security → Delete account) or by writing to us: your access and contact details are deleted, and tax data is blocked for the legally required period. YOUR RIGHTS Access, rectification, erasure, objection, restriction and portability, and withdrawal of consent at any time. Write to us at info@fakturia.es. If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).